PostgreSQL Multiple Vulnerabilities

Release Date: 14 May 2021 12484 Views

RISK: Medium Risk

TYPE: Servers - Database Servers

Multiple vulnerabilities were identified in PostgreSQL, a remote attacker could exploit some of these vulnerabilities to trigger remote code execution and sensitive information disclosure on the targeted system.

Impact

Remote Code Execution
Information Disclosure

System / Technologies affected

PostgreSQL versions prior to 13.3
PostgreSQL versions prior to 12.7
PostgreSQL versions prior to 11.12
PostgreSQL versions prior to 10.17
PostgreSQL versions prior to 9.6.22

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

The vendor has issued fixes:
https://www.postgresql.org/about/news/postgresql-133-127-1112-1017-and-9622-released-2210/

Vulnerability Identifier

Source

PostgreSQL